FiloSottile/mkcert on Hacker News

…replicate it in an afternoon with their favourite Agent CLI. [1] https://www.envoyproxy.io/ [2] https://github.com/FiloSottile/mkcert [3] https://www.obdev.at/products/littlesnitch/ [*] In reality, I created this something like 6 years…

comment by guessmyname · 2026-01-28 · in Show HN: A MitM proxy to see what your LLM tools are sending

I haven't used it, but I think `mkcert` is the go to solution for this. [0] [0]: https://github.com/FiloSottile/mkcert

comment by jmholla · 2025-10-28 · in HTTPS by default

…great, although mkcert does a really great job of smoothing the parts that can be smoothed[1]. [1]: https://github.com/FiloSottile/mkcert

comment by woodruffw · 2025-08-20 · in Show HN: Anchor Relay – A faster, easier way to get Let's Encrypt certificates

There is also mkcert by Filippo Valsorda (no relation to mkcert.org) at https://github.com/FiloSottile/mkcert

comment by bestham · 2025-04-11 · in .localhost Domains

…just checked out if mkcert (the popular way of doing this) supports it and found two issues: https://github.com/FiloSottile/mkcert/issues/131 https://github.com/FiloSottile/mkcert/pull/113 Hopefully Filippo revisits this now that it's…

comment by parhamn · 2025-02-18 · in Setting up a trusted, self-signed SSL/TLS certificate authority in Linux

That isn't so tiny. This is tiny. https://github.com/FiloSottile/mkcert

comment by zikduruqe · 2025-01-19 · in Build a tiny CA for your homelab with a Raspberry Pi

mkcert can help with this! https://github.com/FiloSottile/mkcert As one-time-setup you’ll need to serve the ROOTCA.pem from the Pi and download and install it on the iPad, but once you’ve done this once, any certs you generate on the Pi…

comment by Uehreka · 2024-10-26 · in How to configure an Ethernet connection between iPad and RaspberryPi with USB-C

mkcert might be getting this as well: https://github.com/FiloSottile/mkcert/pull/309/commits/92215... (this is linked from the current submission's readme)

comment by kreetx · 2024-10-22 · in Just want simple TLS for your .internal network?

…Accelerator [2] (Static IP, Route traffic based on location) [2] [0] https://caddyserver.com/ [1] https://github.com/FiloSottile/mkcert [2] https://aws.amazon.com/global-accelerator/

comment by codegeek · 2024-09-15 · in Ask HN: Dev/Ops/DevOps tools you use and more people should

I use https://github.com/FiloSottile/mkcert for my internal stuff.

comment by zikduruqe · 2024-08-10 · in .INTERNAL is now reserved for private-use applications

…mkcert [0] and it works great. One-time setup of 15m to install certs on your dev devices. [0] https://github.com/FiloSottile/mkcert

comment by bavell · 2024-07-21 · in Show HN: I made a tool to HTTPS your localhost

…* https://github.com/OpenVPN/easy-rsa * https://hohnstaedt.de/xca/ * https://github.com/FiloSottile/mkcert (good for on-one-host dev stuff)

comment by throw0101d · 2024-06-11 · in The Backbone of Cybersecurity: Hardware Security Modules

You don't even need to mess with a wildcard from Lets Encrypt, just use https://github.com/FiloSottile/mkcert

comment by zikduruqe · 2024-03-20 · in Lcl.host: fast, easy HTTPS in your local dev environment

…Yikes. Please don't believe in every repo face value. Your best bet is to generate your own certs ( https://github.com/FiloSottile/mkcert ) and sign the dlls yourself.

comment by BandButcher · 2024-02-05 · in As HN: RustDesk Installs Chinese Root Certificates

…look into this. You are your own root CA, I think it can work without an internet connection. [1] https://github.com/FiloSottile/mkcert/ [2] https://news.ycombinator.com/item?id=33383095

comment by jraph · 2024-01-11 · in You can't follow me

…TLS certificate issued via ACME automation. 1. https://news.ycombinator.com/item?id=36674224 2. https://github.com/FiloSottile/mkcert 3. https://blog.anchor.dev/the-acme-gap-introducing-anchor-part...

comment by 8organicbits · 2023-11-01 · in Show HN: Anchor – developer-friendly private CAs for internal TLS

…for Windows, but the author knows what he is doing and his technique seems fairly well thought out. https://github.com/FiloSottile/mkcert

comment by NewJazz · 2023-09-28 · in Show HN: Backname.io – every IP address gets its own domain

…are passed to other issuers like vault and step-issuer. [1] https://smallstep.com/docs/step-ca/ [2] https://github.com/FiloSottile/mkcert [3] https://hohnstaedt.de/xca/

comment by goku12 · 2023-09-17 · in Running one’s own root Certificate Authority in 2023

We use mkcert for this, it works wonderfully. https://github.com/FiloSottile/mkcert

comment by pratio · 2023-08-01 · in Show HN: Local development with .local domains and HTTPS

Can recommend https://github.com/FiloSottile/mkcert for this purpose (local development certs).

comment by rickette · 2023-08-01 · in Show HN: Local development with .local domains and HTTPS

…of folks happily using private CAs, they aren't the target audience for this initial release. [1] https://github.com/FiloSottile/mkcert/issues/302 [2] https://github.com/cert-manager/cert-manager/issues/3655 [3]…

comment by 8organicbits · 2023-07-11 · in Easy HTTPS for your private networks

…private applications, these records should exist in your intranet DNS resolver instead. [1]: https://github.com/FiloSottile/mkcert

comment by andrewmcwatters · 2023-07-11 · in Easy HTTPS for your private networks

…and found mkcert [1] which makes it very easy to do. But it's overkill for most situations. [1] https://github.com/FiloSottile/mkcert

comment by jraph · 2023-06-20 · in Document reasoning to block DNS to 127.0.0.1

…a root cert that could be used to MITM each other). [0] https://en.wikipedia.org/wiki/.test [1] https://github.com/FiloSottile/mkcert

comment by chatmasta · 2023-03-30 · in The fascinating world of HTTP Strict-Transport-Security

https://github.com/FiloSottile/mkcert

comment by marvinblum · 2023-01-01 · in The State of HTTP in 2022

I've not used this directly, but it may be useful: https://github.com/FiloSottile/mkcert mkcert is a simple tool for making locally-trusted development certificates. It requires no configuration. Using certificates from real certificate…

comment by res0nat0r · 2022-02-09 · in Ask HN: What's your solution for SSL on internal servers?

…analyzer provides value for your specific case (including this exhaustive), easily. Example: https://github.com/FiloSottile/mkcert/blob/master/analysis.g...

comment by henvic · 2021-12-10 · in Notes on the Go translation of Reposurgeon (2020)

…work with them, so I don't have to track all the latest whims of each one. Thank you a lot for it!! https://github.com/FiloSottile/mkcert

comment by j1elo · 2021-09-06 · in Show HN: Age 1.0 – Simple, modern and secure file encryption

https://news.ycombinator.com/item?id=17748208 I found the steps described in https://github.com/FiloSottile/mkcert reasonable to follow. It describes an iOS workflow too.

comment by isignal · 2021-03-23 · in Chrome’s address bar will use https:// by default

…host to trust a self signed certificate without much difficulty. Check out this tool for example https://github.com/FiloSottile/mkcert (prev discussion at https://news.ycombinator.com/item?id=17748208 )

comment by isignal · 2021-03-23 · in Chrome’s address bar will use https:// by default

…for this but it's still fiddly. [1] https://letsencrypt.org/docs/certificates-for-localhost/ [2] https://github.com/FiloSottile/mkcert

comment by brigandish · 2021-02-10 · in SDL Moves to GitHub

You don't need let's encrypt for a dev environment, you can use something like https://github.com/FiloSottile/mkcert and run Caddy locally to reverse proxy to whatever you need for development.

comment by dgellow · 2021-01-07 · in Ask HN: What's the road to micropayments being a first-class citizen of the web?

…that itself might be overkill)... as I just needed it to admin my own servers, I decided to use https://github.com/FiloSottile/mkcert for that. I posted what I did in https://henvic.dev/posts/homelab/

comment by henvic · 2020-12-24 · in Build a tiny certificate authority for your homelab

Filippo Valsorda, from the Go security team, created mkcert some time ago → https://github.com/FiloSottile/mkcert which makes this process much easier. I setup a home laboratory for several HTTPS websites and it all works as expected…

comment by guessmyname · 2020-12-23 · in Build a tiny certificate authority for your homelab

…error. You still need to ignore those or install your own root CA with something like https://github.com/FiloSottile/mkcert for that to work seamlessly.

comment by aorth · 2020-12-16 · in Firefox 84.0

…the weird quirks of http vs https: https://blog.filippo.io/mkcert-valid-https-certificates-for-... https://github.com/FiloSottile/mkcert

comment by dnr · 2020-10-07 · in Chrome is deploying HTTP/3 and IETF QUIC

"mkcert" is a tool to automate this: https://github.com/FiloSottile/mkcert

comment by martijnvds · 2020-09-21 · in Let's Encrypt's New Root and Intermediate Certificates

…- it's easy to setup locally trusted certs which I load onto my router and other devices. [1]: https://github.com/FiloSottile/mkcert

comment by arkadiyt · 2020-09-21 · in Let's Encrypt's New Root and Intermediate Certificates

Instead of using hacky fragile methods , use https://github.com/FiloSottile/mkcert to automate setting up local CA and making it trusted.

comment by varbhat · 2020-09-03 · in Automatic SSL Certificates for internal IP's for home k8 setup using LetsEncrypt

This may help https://github.com/FiloSottile/mkcert

comment by joewrong · 2020-08-05 · in Changes to SameSite Cookie Behavior – A Call to Action for Web Developers

…be even more useful (without seeing the warning messages in browsers.) to be used locally. [1]: https://github.com/FiloSottile/mkcert

comment by devy · 2020-05-15 · in An SSL cert that is valid for any and all domains and all levels of subdomains

…now, the only reason I switched to smallstep was for ACME support which mkcert lacks for now (see https://github.com/FiloSottile/mkcert/issues/154 ). I wanted an ACME solution to better automate the server config with Caddy.

comment by lfarzati · 2019-12-28 · in Show HN: Localdots – HTTPS domains for localhost with autoconfig and hot reload

…would prefer to listen to TLS directly, or don't want to use Docker, a great alternative is mkcert: https://github.com/FiloSottile/mkcert It automates creating a self-signed certificate and having it trusted in your local cert stores. I've…

comment by timdorr · 2019-12-28 · in Show HN: Localdots – HTTPS domains for localhost with autoconfig and hot reload

…a custom CA root certificate, which can be installed on iOS etc. mkcert is a good starting point: https://github.com/FiloSottile/mkcert

comment by comex · 2019-07-10 · in Camera and microphone require HTTPS in Firefox 68

…You’d also need a local DNS server to point hosts like fonts.googleapis.com to your own web server. https://github.com/FiloSottile/mkcert https://turbofuture.com/internet/Intercepting-HTTPS-Traffic-... [Edit: Now that I think of it, I’m…

comment by cpach · 2019-07-01 · in PiHole-Google: Completely Block Google and Its Services

…[2] https://segment.com/ [3] https://sentry.io/ [4] https://help.obdev.at/littlesnitch/ [5] https://github.com/FiloSottile/mkcert

comment by guessmyname · 2019-02-07 · in Apple tells app developers to disclose or remove screen recording code

…can follow to generate and install a certificate, so it might be helpful for someone reading this: https://github.com/FiloSottile/mkcert/issues/60

comment by j1elo · 2019-01-07 · in Show HN: Mkcert – Valid HTTPS certificates for localhost

…is, I'm concerned that most of the pre-built binaries (the "pre-built binaries link" goes to https://github.com/FiloSottile/mkcert/releases ) are not signed. There are only a few releases that are marked Verified. Since this messes with…

comment by CaliforniaKarl · 2019-01-07 · in Show HN: Mkcert – Valid HTTPS certificates for localhost

…in 1.11 with GODEBUG=x509ignoreCN=1. Use SANs. This was one of the motives to create mkcert: https://github.com/FiloSottile/mkcert

comment by FiloSottile · 2018-10-26 · in Show HN: I made a script to generate self-signed SSL certs for local development

…are rarely unique, as they usually solve a common problem. I recently built something similar: https://github.com/FiloSottile/mkcert It's in pure Go instead of using OpenSSL, and it works with Windows, macOS and Firefox, too.

comment by FiloSottile · 2018-10-26 · in Show HN: I made a script to generate self-signed SSL certs for local development